Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File:                     P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier:          hiGEuyOaay0ZBMXW5DChfLQk/NaWAv3BqGWmr5mMIjc=
Subject key identifier:   0F:85:FC:0E:54:87:0F:F7:B9:86:FA:A7:DF:84:E2:BF:5C:EE:58:46
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       03D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number:          03BE
Signing time:             Mon 21 Sep 2026 00:25:51 +0000
Manifest this update:     Mon 21 Sep 2026 00:25:51 +0000
Manifest next update:     Mon 28 Sep 2026 00:25:51 +0000
Files and hashes:         1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: gUqVb4bjyoqTmEAE/AvwPmBGPj0DEIys+FvU/Qwsnj8=)
                          2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: QouBh/SopzzJHOsamAAlSJS8qKQU7cprqb1IggD1INw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Sep 21 00:25:51 2026 GMT
            Not After : Sep 28 00:25:51 2026 GMT
        Subject: CN=6ab0798f-b2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:e1:04:2e:0e:1f:72:24:c5:c9:ff:6c:74:
                    9d:da:e1:16:4b:94:74:b8:f9:70:81:ae:35:1c:0c:
                    e2:8c:06:c4:9e:b7:b3:c8:cd:1d:c8:d5:7b:14:a6:
                    50:2b:8c:b5:1c:b1:5b:bc:f9:ca:29:42:18:15:2d:
                    c1:9d:e6:96:a6:39:37:f0:97:6c:6f:e1:f6:8c:3b:
                    e6:e0:fc:f5:b1:aa:29:6a:96:27:79:7b:75:60:d4:
                    a3:3c:16:52:51:cc:53:34:2c:40:9e:0f:95:71:12:
                    07:fd:04:52:43:b4:a4:d7:99:8a:99:80:69:b4:61:
                    89:07:04:59:c8:4d:c6:b3:8b:a5:c3:95:a6:6d:97:
                    67:19:6a:33:d5:c1:ea:9f:ba:34:72:7c:d2:5b:de:
                    83:d0:20:ca:51:ed:1f:78:bb:97:b8:cf:c0:70:bf:
                    d3:c3:4d:24:86:9a:97:00:0e:60:e0:f9:d1:6a:4f:
                    7b:c4:74:29:58:99:cd:82:d0:97:43:5a:53:55:50:
                    13:5e:69:2c:1c:ae:c5:80:8c:d1:fd:2c:b4:9d:79:
                    78:42:c4:32:94:8d:62:d8:ec:d3:b0:8d:ac:3e:b3:
                    f1:dc:4d:b0:1e:7f:f3:72:11:38:d5:da:23:2b:c5:
                    5a:9d:25:22:f0:fa:56:90:df:03:57:9d:74:b9:c7:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:FC:0E:54:87:0F:F7:B9:86:FA:A7:DF:84:E2:BF:5C:EE:58:46
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8f:35:7e:8d:4c:c4:d6:03:31:45:ee:89:d5:38:97:bc:25:
         01:cd:b8:4c:a6:94:58:db:df:3d:27:e5:59:3d:dc:32:4e:6a:
         6d:a8:98:8c:b3:da:c3:92:50:a0:dd:31:99:53:57:e2:a7:b0:
         53:a4:29:3c:57:67:80:ac:6f:a8:86:c5:b2:8a:68:89:cc:c5:
         4b:01:c6:5f:4c:9f:ed:9a:77:a0:d1:16:7c:4c:c4:30:7a:89:
         17:8e:54:f9:e7:6c:5f:ab:d6:13:f1:8b:d6:40:19:94:52:78:
         1d:ac:89:b5:da:03:e9:58:05:2d:9e:90:31:db:d3:95:59:96:
         cf:50:04:4b:3c:6a:91:21:d5:2d:b5:95:80:ab:74:b7:29:ad:
         e3:61:fd:a5:d4:5b:0c:7b:d5:5b:2a:1e:af:b7:71:52:8d:e1:
         2e:75:3e:ce:cd:2a:fc:cd:11:1a:97:0c:9e:2c:c1:b1:8f:16:
         34:b8:0a:1a:17:f8:7d:a1:25:0e:9b:5e:93:03:87:67:6a:d4:
         bd:98:14:04:ab:71:62:9c:e7:6d:21:84:35:9b:72:b0:90:66:
         19:36:05:34:c8:2b:1d:a6:a9:b6:f1:6c:48:d9:09:fe:70:f0:
         c9:09:13:54:f3:f8:cc:07:c7:8c:95:75:a6:83:2d:0f:96:28:
         17:39:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:29:02 2026 by rpki-client